General
-
Target
9609c45540d6c9947fa0e7e8a4d5379dff2a2e98a86f21923097290159b38542
-
Size
558KB
-
Sample
230206-2ag4nsbd61
-
MD5
55ab1daaa3b423def24f2e0c0d9936bb
-
SHA1
e8bfa4e2c9e1d8ed4ea205698dbb194063a6b9a4
-
SHA256
9609c45540d6c9947fa0e7e8a4d5379dff2a2e98a86f21923097290159b38542
-
SHA512
3ff0ccf9b2bf1676fa940b9fe813925514ef5502262780070f3f7550a4eb44b42ab825b83d1ea453f77ac33e6bc690e48599832e7ee4b921cbc7bd1948309899
-
SSDEEP
12288:tMrXy90EyWgZNn0qr4resF++MaT8mNRqZcbQZz9yp:OybgZNn0tLHT8mNRq/gp
Static task
static1
Behavioral task
behavioral1
Sample
9609c45540d6c9947fa0e7e8a4d5379dff2a2e98a86f21923097290159b38542.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
9609c45540d6c9947fa0e7e8a4d5379dff2a2e98a86f21923097290159b38542
-
Size
558KB
-
MD5
55ab1daaa3b423def24f2e0c0d9936bb
-
SHA1
e8bfa4e2c9e1d8ed4ea205698dbb194063a6b9a4
-
SHA256
9609c45540d6c9947fa0e7e8a4d5379dff2a2e98a86f21923097290159b38542
-
SHA512
3ff0ccf9b2bf1676fa940b9fe813925514ef5502262780070f3f7550a4eb44b42ab825b83d1ea453f77ac33e6bc690e48599832e7ee4b921cbc7bd1948309899
-
SSDEEP
12288:tMrXy90EyWgZNn0qr4resF++MaT8mNRqZcbQZz9yp:OybgZNn0tLHT8mNRq/gp
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-